I need to make an asynchronous call to a secure (HTTPS) URL for the same domain.
Currently the page is working with regular HTTP (non-secure).
In other word
I am using Access-Control-Allow-Origin. You just send the header and you are fine.
See also AJAX, Subdomains, and SSL